Nginx configuration: How to redirect HTTP to HTTPS and any subdomain to a single subdomain. Blog post https://ping.flenny.net/2016/nginx-redirect-any-subdomain-http-or-https-to-a-single-subdomain/

redirect-any-subdomain-at-any-scheme-to-a-single-subdomain.config

server {
	listen 80;
	listen 443 ssl;
	server_name *.flenny.net;
	return 301 https://ping.flenny.net$request_uri;
}

server {
	listen 443 default ssl;
	server_name ping.flenny.net;

	root /var/www;
	index index.html index.htm;

	ssl on;
	ssl_certificate			path/to/ssl.crt;
	ssl_certificate_key		path/to/ssl.key;

	ssl_dhparam			ssl/dhparam.pem;

	ssl_session_timeout		5m;
	ssl_protocols			TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers			"EECDH+AESGCM:EDH+AESGCM:ECDHE-RSA-AES128-GCM-SHA256:AES256+EECDH:DHE-RSA-AES128-GCM-SHA256:AES256+EDH:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
	ssl_prefer_server_ciphers	on;
	ssl_session_cache		shared:SSL:10m;

	ssl_stapling			on;
	ssl_stapling_verify		on;
	resolver			8.8.8.8 8.8.4.4 valid=300s;
	resolver_timeout		5s;
	
	location / {
		proxy_pass https://x.y.z;
	}
}